From what I can tell, one of these newer emails done through the same mailserver as the others seems to be advertising the MakeBTC webhost, as alleged by MakeBTC theirself. If this is any solid proof, which it isn't necessarily, then it may indeed be their host who is causing all this trouble, and I'm swayed to agree until proof to the contrary appears.
Also, after refreshing my inbox it seems an email from "BTC square" with a 'reflink' to the previously mentioned Site #2 (engineerinv) with the exact same sender.
Delivered-To: @gmail.com
Received: by 10.114.177.233 with SMTP id ct9csp281210ldc;
Wed, 19 Mar 2014 09:53:54 -0700 (PDT)
X-Received: by 10.43.155.84 with SMTP id lh20mr2245832icc.81.1395248033084;
Wed, 19 Mar 2014 09:53:53 -0700 (PDT)
Return-Path: <
enginnv@server1.lotusproxy.com>
Received: from server1.lotusproxy.com ([192.184.9.147])
by mx.google.com with ESMTPS id t18si31294615igr.5.2014.03.19.09.53.52
for <@gmail.com>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 19 Mar 2014 09:53:53 -0700 (PDT)
Received-SPF: neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of
enginnv@server1.lotusproxy.com) client-ip=192.184.9.147;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 192.184.9.147 is neither permitted nor denied by best guess record for domain of
enginnv@server1.lotusproxy.com) smtp.mail=enginnv@server1.lotusproxy.com
>>>Received: from enginnv by server1.lotusproxy.com with local (Exim 4.82)
(envelope-from <
enginnv@server1.lotusproxy.com>)
<<< id 1WQJHU-001bXz-NL
for @gmail.com; Wed, 19 Mar 2014 09:23:52 -0700
To: @gmail.com
Subject: Anonymous and Ready bitcoin webhost - Bitcoin cloud mining
From:
btcwebhost.com <webmaster@btcwebhost.com>MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <
E1WQJHU-001bXz-NL@server1.lotusproxy.com>
Date: Wed, 19 Mar 2014 09:23:52 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.lotusproxy.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [514 526] / [47 12]
X-AntiAbuse: Sender Address Domain - server1.lotusproxy.com
X-Get-Message-Sender-Via: server1.lotusproxy.com: authenticated_id: enginnv/only user confirmed/virtual account not confirmed
Hello, we come here to offer to your our services at
http://www.btcwebhost.comWe offer professional webhost services, make a lookup at our site btcwebhost.com
Each new member will get a bonus balance of $10, there you can test our services.
Our hosts are all protected by ddos attacks and our service is fully anonymous.
Thanks
Van Han Peter
btcwebhost.com